08-06-2025 10:22 AM
I have several ASA appliances on our production network. We are moving away from Aruba Clearpass and moving to Cisco ISE. This will include our TACACS functionality.
I see in the ASA configuration in ASDM where i configure the AAA server groups. I have created a new AAA server group for our new ISE servers.
What i am wondering is if in fact the ASA will contact whichever server group is first in the list. I tend to lean on "probably not" as i do not see any "Move UP" or Move Down" options in there.
Thanks for any feedback here,
KMNRuser
Solved! Go to Solution.
08-06-2025 10:26 AM
Now you have two group? One for clearpass and other for ISE
The group you config in aaa authc is only group that asa use for authc
So only change name of group in aaa authc from clearpass group to ise group
MHM
08-06-2025 10:26 AM
Now you have two group? One for clearpass and other for ISE
The group you config in aaa authc is only group that asa use for authc
So only change name of group in aaa authc from clearpass group to ise group
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide